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CLAIMS 

What is claimed is: 

1. A process for accessing a non-Enterprise JavaBean (EJB) Common Object 
Broker Request Architecture (CORBA) object method on a server, said process 
comprising: 

receiving at the server a request for the CORBA object method; 

directing said request to a shadow EJB object method, said shadow EJB object 
method being a complementary method to the CORBA object method; and 

obtaining authorization from a security service to access the CORBA object 
method based on a role of a requesting user. 

2. The process of claim 1, wherein the server has access to said CORBA object 
method and a non-shadow EJB object method. 

3. The process of claim 1 , further comprising: 

receiving an assigned user role for a requesting user of a client computer 
connected to the server; 

storing said user role in the server; 

generating a method-role mapping table to define an authorized role to access 
said CORBA object method; and 

comparing said assigned user role with said authorized role to determine if said 
requesting user is authorized to access said CORBA object method. 
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4. A computer system server for providing a non-Enterprise JavaBean (EJB) 
Common Object Broker Request Architecture (CORBA) object method, said computer 
system server comprising: 

means for receiving at the computer system server a request from a requesting 
user for the CORBA object method; 

means for directing said request to a shadow EJB object method, said shadow 
EJB object method being a complementary method to the CORBA object method; and 

means for obtaining authorization from a security service to access the CORBA 
object method based on a role of said requesting user. 

5 . The computer system server of claim 4, wherein the computer system server has 
access to said CORBA object method and a non-shadow EJB object method. 

6. The computer system server of claim 4, further comprising: 

means for receiving a user role for a requesting user of a client computer 
connected to the computer system server; 

means for storing said user role in the computer system server; 

means for generating a method-role mapping table to define an authorized role 
to access said CORBA object method; and 

means for comparing said user role with said authorized role to determine if said 
requesting user is authorized to access said CORBA object method. 
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7. A computer program product, residing on a computer usable medium, for 
accessing a non-Enterprise JavaBean (EJB) common Object Broker Request Architecture 
(CORBA) object method on a server, said computer program product comprising: 

program code means for receiving at a server a request from a requesting user for 
a CORBA object method; 

program code means for directing said request to a shadow EJB object method, 
said shadow EJB object method being a complementary method to said CORBA object 
method; and 

program code means for obtaining authorization from a security service to access 
said CORBA object method based on a role of said requesting user. 

8 . The computer program product of claim 7, wherein said server has access to said 
CORBA object method and a non-shadow EJB object method. 

9. The computer program product of claim 7, further comprising: 

program code means for receiving an assigned user role for a requesting user of 
a client computer connected to the server; 

program code means for storing said user role in the server; 

program code means for generating a method-role mapping table to define an 
authorized role to access said CORBA object method; and 

program code means for comparing said assigned user role with said authorized 
role to determine if said requesting user is authorized to access said CORBA object 
method. 



